Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Google Chromium V8 Inappropriate Implementation VulnerabilityPatch nowKEVEPSS 18.53%Aug 21, 2024
- Medium4.4In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values syzbot is able to trigger softlockups, set…Check if you run itEPSS 0.17%Jul 30, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() syzkaller reports a warning in __xdp_reg_mem_model().Check if you run itEPSS 0.25%Jul 29, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL deref in fib6_nh_init() syzbot reminds us that in6_dev_get() can return NULL.Check if you run itEPSS 0.27%Jul 12, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference in rt6_prob…Check if you run itEPSS 0.27%Jul 12, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return NULL, xfrm6…Check if you run itEPSS 0.28%Jul 12, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible race in __fib6_drop_pcpu_from() syzbot found a race in __fib6_drop_pcpu_from() […Check if you run itEPSS 0.27%Jul 12, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implement() Syzkaller hit a warning [1] in a call to imp…Check if you run itEPSS 0.30%Jul 12, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() syzbot reported that…Check if you run itEPSS 0.28%Jun 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets TCP_SYN_RECV state is really special, i…Check if you run itEPSS 0.33%May 30, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger t…Check if you run itEPSS 0.29%May 30, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING syzbot reported an illegal copy in xsk…Check if you run itEPSS 0.26%May 20, 2024
- Critical9.6Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 7.47%May 20, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs e…Check if you run itEPSS 0.23%May 19, 2024
- Critical9.6Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 15.24%May 13, 2024
- High8.8Google Chromium V8 Out-of-Bounds Memory Write VulnerabilityPatch nowKEVEPSS 11.01%May 9, 2024
- Critical9.6Google Chromium Visuals Use-After-Free VulnerabilityPatch nowKEVEPSS 8.35%May 7, 2024
- UnknownGoogle Chrome Incorrect AuthorizationPatch nowKEVEPSS 15.73%May 6, 2024
- UnknownGoogle Chrome Use After FreePatch nowKEVEPSS 13.07%May 6, 2024
- UnknownGoogle Chrome Pepper Plug-in API (PPAPI) PepperInProcessRouter::SendToHost VulnerabilityPatch nowKEVEPSS 1.45%May 6, 2024
- Medium6.4In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix uaf in pvr2_context_set_notify [Syzbot reported] BUG: KASAN: slab-use-after-fre…Check if you run itEPSS 0.25%Apr 17, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/ipv6: avoid possible UAF in ip6_route_mpath_notify() syzbot found another use-after-free in ip6_route_mpath_Check if you run itEPSS 0.27%Apr 17, 2024
- UnknownCodeCabin wp_go_maps Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.75%Mar 25, 2024
- UnknownWestern Digital mycloud_nas Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 97.82%Feb 7, 2024
- UnknownGoogle Chrome Out-of-bounds ReadPatch nowKEVEPSS 13.36%Feb 2, 2024